$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json) Hash identifier: AMo0xvYPF7QSkEu3pcubDnwVZCiDDcuSFF4tCsgn+Vs= Subject key identifier: 08:43:5C:65:4A:85:05:72:E1:34:61:49:E9:C3:A4:14:9C:C0:F3:49 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 0197B8FCDDE80F26CA5D558ED7DBA9992A77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft Manifest number: 15C9 Signing time: Sun 29 Jun 2025 00:01:08 +0000 Manifest this update: Sun 29 Jun 2025 00:01:08 +0000 Manifest next update: Mon 30 Jun 2025 00:01:08 +0000 Files and hashes: 1: BO-bzW2V5HfZnpDWCOZRREj0_aA.roa (hash: bBvM5GD33JW26g6UBHC38zwmrN/wxvFNIrA/ZVP1z3g=) 2: D2VP3boIbKOt_7fZmoGwBMd0j_E.roa (hash: 5B9i3Ekd388l3dq3yF+uoTeTOTbzf9g6nU3q4mHoYKI=) 3: KDntMwv7lfN57GwH3c-ooOZ7MV8.roa (hash: N8ZIBiU8gH7tSdeMv2oT8+5VHr8ZvOaPGXUGzn1qd6o=) 4: MKXE3l_kRrUK-SEa0SjlnZgrzOY.roa (hash: qB75ATBjq0bvGr3VuX9ZJkiNF1i/cky+GUiK1V7um9s=) 5: OMLGm3M8AukdVmECZgGAm5oBI6w.roa (hash: NhtCtzcMBYjPL2amj6HhHMrktNr+dPVzL27OzOSW9VY=) 6: QhEieVCa4VzXwRS2R-uT3VD69zA.roa (hash: g7EksG6Y5xUVpGTxJtSk1SiYEQY9x4uAiGIMcbCmQ/k=) 7: T_vGm-YR8rSAG_LKyG-LL0j3jZY.roa (hash: ctLCD3mPPm9ORV/MIVYXQC7GReMvIOdcov6IyRw8Un0=) 8: VT5Wd_pqOJ9dH5ke9coXfMElArk.roa (hash: fLcCO/2FWRaPE55k8VUjCjI94f4/oSwtLUtlY9+MVT8=) 9: ZwvgwSFitJnn0NI2TLMjAG1OYEI.roa (hash: 3EAQTTBdwC0en0ttbPcWmRtInqoUrBVPVbUH2J6E2Tg=) 10: i2Cr6PSWUcoNruWdbdR97Em0Dh4.roa (hash: kTy26coV3ftFQPHtpIaAlqr+Ns/2fmpdvjWPntGul4A=) 11: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: sbhRarmCjNotSy7p9fBlFwVd6sn5CqAYdQOu3mBUaIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:fc:dd:e8:0f:26:ca:5d:55:8e:d7:db:a9:99:2a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Jun 29 00:01:08 2025 GMT Not After : Jun 30 00:01:08 2025 GMT Subject: CN=08435c654a850572e1346149e9c3a4149cc0f349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:f4:27:52:6d:af:97:b0:8a:32:9e:30:72: 53:cc:61:1d:29:62:08:60:b7:b2:55:ed:5a:25:60: 6e:c2:9b:6c:48:dc:af:28:7e:3e:9a:f2:1f:79:0c: 90:35:2f:80:ff:ba:08:71:86:9e:8e:71:64:48:86: 26:2c:33:83:fd:c1:b1:3b:af:7c:81:26:d0:9c:a0: 97:2d:9e:26:90:3c:29:78:f1:b2:3a:3b:14:66:70: dc:08:70:0a:2c:f3:b6:a2:fa:ee:8e:c4:c5:dd:75: 93:5f:a6:9a:90:07:f1:6e:67:f1:99:dc:e8:9d:39: 0b:fc:b8:8b:a7:38:ab:a1:20:ce:cb:4a:b9:9d:96: 4d:40:aa:9a:5a:64:48:05:9f:87:50:e1:68:82:92: f4:c2:4c:64:66:3e:3c:d3:1a:cd:cd:8c:1c:00:4e: c2:31:b1:3f:55:b0:31:47:a7:a1:50:e0:d9:82:8e: 5a:fa:94:5c:9b:ce:77:01:4f:d5:dd:e9:23:2d:9a: 29:2b:3a:1d:9c:f2:26:49:f1:8c:39:8c:40:fe:97: 4d:fb:52:69:30:fb:de:86:2b:5e:5d:77:aa:73:62: 7c:66:e0:f5:f8:0b:5d:e2:33:79:de:cf:ee:ae:d9: dc:09:fd:94:5f:66:e3:97:65:21:38:b7:1b:a3:38: ac:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:43:5C:65:4A:85:05:72:E1:34:61:49:E9:C3:A4:14:9C:C0:F3:49 X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:65:0b:64:35:79:c3:bc:c0:90:9e:4b:75:37:e1:f0:ab:89: 26:fd:5d:3f:fc:2e:d8:dc:1e:8e:0b:a7:29:f2:cc:8e:b1:63: 52:7a:1d:36:3c:ce:e7:26:f2:14:48:c9:89:31:7a:1c:80:c6: 55:2d:9a:85:f6:7b:0c:68:b4:ea:1e:9e:b6:1e:3e:be:40:eb: d7:3d:13:b9:a6:51:b0:32:68:44:4f:27:29:5c:8a:4a:f9:e0: 59:ee:9d:d7:22:bc:b1:cd:d7:83:56:f5:4d:fd:4b:23:cb:8f: 7f:8f:b8:b9:48:b6:e4:a4:e6:c2:e9:70:a5:54:da:a8:07:e1: 98:32:84:74:2a:76:00:10:9f:5c:bb:45:5e:27:e5:88:a8:ed: 5f:fd:b8:ea:d2:48:d3:77:b5:c8:bb:87:6a:46:98:bf:a5:12: 45:4f:71:6a:f7:d8:7e:f1:ef:b7:35:16:8e:4c:f9:f0:c5:66: 1b:16:8b:29:2b:b6:20:a0:f5:78:b3:82:f2:fb:5d:2d:a9:55: c0:c2:6a:e1:37:e2:6d:cb:7b:e5:83:57:29:03:59:ca:07:2a: b8:62:1c:bc:e6:af:3a:db:39:de:e7:66:bb:2a:5a:6c:12:0d: 5e:5f:70:67:d1:72:d2:07:b4:23:30:53:ed:37:af:10:47:61: 24:1e:d3:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4/N3oDybKXVWO19upmSp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjUwNjI5MDAwMTA4WhcNMjUwNjMwMDAwMTA4WjAzMTEwLwYDVQQD EygwODQzNWM2NTRhODUwNTcyZTEzNDYxNDllOWMzYTQxNDljYzBmMzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIr0J1Jtr5ewijKeMHJTzGEdKWII YLeyVe1aJWBuwptsSNyvKH4+mvIfeQyQNS+A/7oIcYaejnFkSIYmLDOD/cGxO698 gSbQnKCXLZ4mkDwpePGyOjsUZnDcCHAKLPO2ovrujsTF3XWTX6aakAfxbmfxmdzo nTkL/LiLpziroSDOy0q5nZZNQKqaWmRIBZ+HUOFogpL0wkxkZj480xrNzYwcAE7C MbE/VbAxR6ehUODZgo5a+pRcm853AU/V3ekjLZopKzodnPImSfGMOYxA/pdN+1Jp MPvehiteXXeqc2J8ZuD1+Atd4jN53s/urtncCf2UX2bjl2UhOLcbozisNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhDXGVKhQVy4TRhSenDpBScwPNJMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWULZDV5 w7zAkJ5LdTfh8KuJJv1dP/wu2NwejgunKfLMjrFjUnodNjzO5ybyFEjJiTF6HIDG VS2ahfZ7DGi06h6eth4+vkDr1z0TuaZRsDJoRE8nKVyKSvngWe6d1yK8sc3Xg1b1 Tf1LI8uPf4+4uUi25KTmwulwpVTaqAfhmDKEdCp2ABCfXLtFXifliKjtX/246tJI 03e1yLuHakaYv6USRU9xavfYfvHvtzUWjkz58MVmGxaLKSu2IKD1eLOC8vtdLalV wMJq4Tfibct75YNXKQNZygcquGIcvOavOts53udmuypabBINXl9wZ9Fy0ge0IzBT 7TevEEdhJB7TrQ== -----END CERTIFICATE-----Generated at Sun Jun 29 09:36:53 2025 by rpki-client